
Error: rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
File: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft (raw, json)
Hash identifier: d8uRoOEXDJf2AMT75wwwoK5c0Hay6K4qtCkcxlI4OWE=
Subject key identifier: E9:DF:D1:03:CA:1F:B8:E3:CB:DA:22:5D:F7:EC:83:3E:3B:66:66:13
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Certificate issuer: /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial: 63F12B187A9D56CB43DCC3C6646639C2F078D768
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
Manifest number: 0574
Signing time: Mon 19 Oct 2026 11:00:00 +0000
Manifest this update: Mon 19 Oct 2026 10:55:00 +0000
Manifest next update: Tue 20 Oct 2026 11:00:00 +0000
Files and hashes: 1: 323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (hash: 0MMOAs1MWxCvekbrZ3YR/igWWET3IbGvNy0LegCBu28=)
2: 3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (hash: ghF1TGhBZZyNg9ABkTWFCoeZHaXw906fT76yMOCnUfc=)
3: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl (hash: /rhShLMEsYxN0nkSMRViWWioGldOiPTwZZcs34h3cN8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f1:2b:18:7a:9d:56:cb:43:dc:c3:c6:64:66:39:c2:f0:78:d7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Validity
Not Before: Oct 19 10:55:00 2026 GMT
Not After : Oct 20 11:00:00 2026 GMT
Subject: CN=3082010A0282010100A5018809C7D05663D83F3D900A0CFBE96BA6441EA0B3BE3994EDF58F26577E7946538ED0678A9B518FD840D3C49E0A58560AE8675D74B890152A8FA8609E138F0DEC4DEAC7D5820D6E8279881885C497DCA2DBB695DCADEA82883639ED71C3A64CC2907B3DF1D1BE10C4D0AD5E2D5F37B762323C6AC00DF5574DCA47FAB6D4055187E178293A23BDE2049CC8F8968219F2BE9389F5C181A54F0CC233DBE101EE3A32E61C255CF8557987BD695E2D1E1A1CE2E509A896AE9778C3F3E14DA6280247429F131633E463EB23EBF9289BFAB5DCF9B987886ACB10C99D2C8A1D0CBF19952264D0551EBE37488839F7D8C4FAC1F373B5378F994C2042588F8EDF7B795D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:88:09:c7:d0:56:63:d8:3f:3d:90:0a:0c:
fb:e9:6b:a6:44:1e:a0:b3:be:39:94:ed:f5:8f:26:
57:7e:79:46:53:8e:d0:67:8a:9b:51:8f:d8:40:d3:
c4:9e:0a:58:56:0a:e8:67:5d:74:b8:90:15:2a:8f:
a8:60:9e:13:8f:0d:ec:4d:ea:c7:d5:82:0d:6e:82:
79:88:18:85:c4:97:dc:a2:db:b6:95:dc:ad:ea:82:
88:36:39:ed:71:c3:a6:4c:c2:90:7b:3d:f1:d1:be:
10:c4:d0:ad:5e:2d:5f:37:b7:62:32:3c:6a:c0:0d:
f5:57:4d:ca:47:fa:b6:d4:05:51:87:e1:78:29:3a:
23:bd:e2:04:9c:c8:f8:96:82:19:f2:be:93:89:f5:
c1:81:a5:4f:0c:c2:33:db:e1:01:ee:3a:32:e6:1c:
25:5c:f8:55:79:87:bd:69:5e:2d:1e:1a:1c:e2:e5:
09:a8:96:ae:97:78:c3:f3:e1:4d:a6:28:02:47:42:
9f:13:16:33:e4:63:eb:23:eb:f9:28:9b:fa:b5:dc:
f9:b9:87:88:6a:cb:10:c9:9d:2c:8a:1d:0c:bf:19:
95:22:64:d0:55:1e:be:37:48:88:39:f7:d8:c4:fa:
c1:f3:73:b5:37:8f:99:4c:20:42:58:8f:8e:df:7b:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:D1:03:CA:1F:B8:E3:CB:DA:22:5D:F7:EC:83:3E:3B:66:66:13
X509v3 Authority Key Identifier:
keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:52:a3:be:dd:0b:1e:0c:42:c0:e8:5f:cd:3a:5e:a9:b3:a0:
51:75:34:84:bc:f9:df:9f:3d:80:47:dc:96:c2:b1:44:b6:3a:
cb:1f:17:49:1c:3a:37:f0:b2:1f:36:b0:fc:34:a5:a3:98:1e:
89:39:d5:cd:39:62:93:37:18:06:8b:f1:f4:e2:38:51:a4:2e:
56:8c:b2:77:d1:e3:79:95:3a:0e:4b:a9:a8:e6:6e:5c:cb:ac:
d7:9c:3e:c0:7f:36:5a:59:85:fa:cc:b2:77:43:48:ea:4c:76:
4b:35:f7:eb:59:8b:9b:04:1f:73:5b:72:55:21:ae:8c:26:20:
48:06:4a:b9:d7:b3:0b:8e:63:7d:53:1b:5e:25:2a:d2:65:7e:
9c:b1:3f:00:cb:f7:fc:d1:2f:6c:f2:fa:50:f6:3a:b5:14:7a:
b7:a6:75:32:ad:99:03:31:78:55:a2:2c:34:a0:d6:5e:22:10:
0b:96:84:21:08:b1:d9:2b:04:be:af:05:82:52:ac:0a:00:0b:
d5:e0:9d:7c:8c:ac:6f:8a:82:27:73:77:c4:f2:16:55:33:c5:
f4:99:f2:7a:af:53:33:06:c5:da:7b:42:e5:28:4b:dd:78:48:
51:ca:07:50:39:16:99:6a:8a:2a:86:57:35:3f:21:a6:e4:d9:
3b:15:6f:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 02:37:31 2026 by rpki-client